Archive
13 April 2017
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
Medium 5.3
An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless…
-
Medium 5.3
An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Serie…
-
Medium 5.3
An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A w…
-
Medium 5.9
An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP runn…
-
Medium 6.1CVE-2017-7725 Public exploit
Concrete CMS vulnerable to cross-site scripting (XSS)
concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain na…
-
Medium 6.1
ember-source Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script…
-
Medium 5.3
SaltStack has insecure /tmp file handling in salt/modules/chef.py
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
-
Medium 5.3
Salt improper handling of tmp files
modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.